JDK-8161710 : Remove java.xml.crypto dependencies on sun.security.jca
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.xml.crypto
  • Affected Version: 9
  • Priority: P4
  • Status: Closed
  • Resolution: Duplicate
  • Submitted: 2016-07-19
  • Updated: 2016-07-27
  • Resolved: 2016-07-27
Related Reports
Duplicate :  
Relates :  
Description
The TransformService and XMLSignatureFactory classes in the javax.xml.crypto.dsig package and the KeyInfoFactory class in the javax.xml.crypto.dsig.keyinfo package have a dependency on classes in the internal sun.security.jca package to help find the Spi implementation for the requested type. This code can be replaced with the standard Provider.Service API. It previously used the sun.security.jca classes because JSR 105 was originally designed as a standalone JSR that could run on JDK 1.4.2 and up. The Provider.Service API was added in JDK 1.5. However, JSR 105 has been discontinued as a standalone JSR and is now only delivered in Java SE, so this code can be replaced.
Comments
Fixed as part of JDK-8159488.
27-07-2016

When this dependency is replaced, the code should no longer need the following permission: permission java.lang.RuntimePermission "accessClassInPackage.sun.security.jca.*"; and it should be removed from the system policy file.
19-07-2016